📢 Windows 11 24H2 hits End of Support — How to Upgrade to 26H2

Why Windows Eleven Twenty-Four H Two Home and Pro Reached End of Updates

Under Microsoft's Modern Lifecycle Policy, consumer releases of Windows 11 receive exactly 24 months of monthly security and quality updates from their general availability date. When Microsoft shipped OS Build 26100.9711 on October 13, 2026, that two-year window closed for Windows 11 24H2 Home, Pro, Pro Education, and Pro for Workstations.

Starting with the November 2026 Patch Tuesday cycle, unupgraded 24H2 Home and Pro PCs will receive zero security patches against new kernel exploits—a risky position given how fast attackers weaponize monthly disclosures like those we analyzed in our emergency out-of-band .NET security update breakdown. Only Enterprise, Education, and IoT Enterprise editions of 24H2 remain on active security servicing until October 2027, though Microsoft also retired non-security preview updates for those commercial editions this month.

Fortunately, moving off version 24H2 does not require a slow, full operating system reinstallation. Because versions 24H2, 25H2, and the latest release covered in our Windows 11 26H2 new features guide share the same core servicing branch, upgrading only requires flipping on Get the latest updates as soon as they're available in Windows Update to pull a tiny enablement package.

What Broke Smart App Control and Remote Desktop in the October Security Patch

While closing out consumer support for 24H2, the October 13 update (KB5127648 across builds 26100.9711, 26200.9711, and 26300.9711) introduced an annoying UI regression inside the Windows Security app. Users who previously turned off Smart App Control (SAC) discovered that the toggle switch to turn Smart App Control back on was completely grayed out.

As reported by BleepingComputer, the bug thankfully did not disable protection on machines where Smart App Control was already active, nor did it weaken Microsoft Defender or SmartScreen. However, developers who temporarily disabled SAC to run unsigned local binaries on a rig configured with our modern Windows 11 developer workstation guide found themselves locked out of re-enabling the cloud-powered code integrity guard.

Enterprise administrators hit a second roadblock in the same servicing wave when non-admin users tried connecting via Remote Desktop to host PCs running Administrator protection. Carried over from the September preview update (KB5124010), affected sessions failed immediately with error code 0xC000000D ("The token that was passed to the function is invalid") because Windows rejected the standard user token during elevation handshakes.

How the Optional Preview Update Restores the Smart App Control Switch

On October 28, 2026, Microsoft shipped optional preview update KB5127936, advancing Windows 11 26H2 to OS Build 26300.9818 and Windows 11 25H2 to OS Build 26200.9818. Installing this package immediately unlocks the Smart App Control toggle inside Windows Security > App & browser control > Smart App Control settings and resolves the Remote Desktop 0xC000000D token failure.

If your PC runs version 25H2 or 26H2, you can grab the fix right now by opening Settings > Windows Update > Advanced options > Optional updates and selecting KB5127936. If your company blocks optional preview packages, you only need to wait a few days—Microsoft will bundle the exact same fixes into the mandatory November 10, 2026 Patch Tuesday cumulative security update.

Registry and Group Policy Workarounds for Systems Still on Older Builds

Here is the catch that caught many IT teams off guard: because Windows 11 24H2 no longer receives non-security preview updates—and 24H2 Home and Pro are out of support entirely—version 24H2 never gets KB5127936. As documented in the official Microsoft KB5127648 support advisory, 24H2 users who do not upgrade to 25H2 or 26H2 must apply a manual Known Issue Rollback workaround.

On standalone PCs, open the Start menu, type cmd, right-click Command Prompt to select Run as administrator, and execute these two registry override commands under the HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides path before rebooting:

• reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2883193997 /t REG_DWORD /d 1 /f
• reg add "HKLM\SYSTEM\CurrentControlSet\Policies\Microsoft\FeatureManagement\Overrides" /v 2850574478 /t REG_DWORD /d 1 /f

For domain-joined enterprise fleets managed through Active Directory or Intune, administrators can deploy Microsoft's two official Group Policy templates—KB5074105 261015_19222 Feature Preview (which restores the toggle) and KB5074105 261015_19221 Feature Preview (which enables diagnostic logging)—and set both policies to Enabled.

Six Everyday Bug Fixes for Gaming Mice, Windows Hello, and Legacy Wi-Fi

Beyond the headline Smart App Control drama, the October 2026 servicing wave quietly resolves several hardware and networking annoyances across Windows 11. Gamers who tuned their PCs using our Windows 11 peak gaming performance guide get a critical fix for high-polling-rate mouse input stuttering, alongside a patch that restores Windows Hello fingerprint login after a cold boot and fixes RAW printer driver failures.

Cloud and storage admins also gain fixes for explorer.exe black-screen crashes on multi-user Azure Virtual Desktop hosts, broken AC-3 Dolby audio playback, and tiered Storage Spaces Direct virtual disks failing to come online. However, keep an eye on your office wireless network: KB5127648 switches BlockNtlmv1SSO to Enforce mode (1) by default when Credential Guard is disabled, which can drop legacy MS-CHAPv2 Wi-Fi or VPN connections and trigger the exact symptoms we troubleshoot in our Wi-Fi connected but no internet fix guide.

Comparing Servicing Status and Fixes Across Windows Eleven Branches

Frequently Asked Questions (FAQ)

End Note

Staying on an out-of-support Windows build is never worth the risk when jumping from version 24H2 to 25H2 or 26H2 takes a five-minute enablement package and a single reboot. Upgrading not only restores monthly security patches before the November Patch Tuesday cycle, but also gives you clean access to KB5127936 so you can manage Smart App Control and Remote Desktop without hacking registry keys. Have you moved your machines to Windows 11 26H2 yet, or did KB5127648 catch your Wi-Fi or security settings off guard? Let me know in the comments below!